Aren't you skipping ahead a little?  What about that new Active Directory
thing that everyone is talking about? <G> 

-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Gil Kirkpatrick
Sent: Tuesday, February 22, 2005 3:54 PM
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] Is it possible ? deny domain admins create new user
permission

My next post will be regarding the Windows Server 2003 Beta... 

________________________________

From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of joe
Sent: Tuesday, February 22, 2005 1:29 PM
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] Is it possible ? deny domain admins create new user
permission


Well, I thought *I* was behind in my email. :o)
 
  joe

________________________________

From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Gil Kirkpatrick
Sent: Tuesday, February 22, 2005 2:49 PM
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] Is it possible ? deny domain admins create new user
permission


Can't be done. Domain admins own the domain (and can own the forest if
they're persistent about it). You can make it perhaps a little inconvenient
for them to add users, but you can prevent them from doing it.
 
-gil

________________________________

From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of "Sanz de León, Juan
Carlos"
Sent: Thursday, July 29, 2004 4:15 AM
To: 'ActiveDir@mail.activedir.org'
Subject: [ActiveDir] Is it possible ? deny domain admins create new user
permission


Dear Gurus,

We are currently working on a project where we need to deny domain
administrators the permission to "create new users".(and assign it to some
other group) Is this technically possible ? Has anyone actually done it
before ?

Thanks in advance for your help,

Juan Carlos Sanz

 
List info   : http://www.activedir.org/List.aspx
List FAQ    : http://www.activedir.org/ListFAQ.aspx
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/

Reply via email to